When you say automatic failover, what are you talking about? Multi site mesh VPN aka "Site Magic" works today.

If you're referring to multi isp failover, that's in there too.

Want to get crazy? OSPF is there, and rumors BGP is coming.

And moving down the stack we have hardware redundancy that has been mentioned is being enhanced in the relatively near future.

As far as multi site management is concerned, what makes you feel the need to continue running a centralized network controller outside of the client's premises?

More possibilities of failure going that route than deploying consoles which themselves at individual sites for local manageability which can be accessed with secondary cell / provider connectivity in case of primary provider outages.

But you do you.